include("../config/conn.php"); include("../config/function.php"); if($_GET["chk"]!=sha1($_GET[id].weburl)){php_toheader("../");} $id=$_GET[id]; $tmp=$_GET[tmp]; if(!preg_match("/^[_a-zA-Z0-9.@]*$/",$tmp) || empty($tmp)){Audit_alert("非法来源!","../");} while0("id,uid,getpwd","yjcode_user where id=".$id." and getpwd='".$tmp."'");if(!$row=mysql_fetch_array($res)){Audit_alert("路径错误!","getpasswd.php");} $uid=$row[uid]; if(sqlzhuru($_POST[jvs])=="repwd"){ zwzr(); $pwd=sha1(sqlzhuru($_POST[t1])); $y=time().rnd_num(100); updatetable("yjcode_user","pwd='".$pwd."',getpwd=''where id=".$id." and getpwd='".$tmp."'"); $_SESSION["SHOPUSER"]=$uid; php_toheader("../user/"); } ?>